Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


respond-bad-spi (Services IKE Policy)


Hierarchy Level


Enable response to invalid IPsec Security Parameter Index (SPI) values. If the security associations (SAs) between two peers of an IPsec VPN become unsynchronized, the device resets the state of a peer so that the two peers are synchronized.



Number of times to respond to invalid SPI values per gateway.

  • Range: 1 through 30

  • Default: 5

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.3.